Application Security & SDLC Governance Lead (AI Security)

Eames Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Eames Consulting in Singapore seeks an Application Security Manager to bring governance and structured security to the software development lifecycle. This is not a hands-on code review role; you will define checkpoints and partner with developers to lift secure coding hygiene.

You will drive AI security thinking, assess AI-related risks, and influence teams to adopt practical, secure practices while communicating with stakeholders across the business.

Qualifications

• Solid grounding in application security and SDLC governance.
• Working knowledge of AI security considerations and AI threat vectors.
• Comfortable engaging developers directly on security practice with strong emotional intelligence and stakeholder management.

Responsibilities

• Own and enforce SDLC governance checkpoints, ensuring development practices meet security and compliance standards.
• Partner with the software development team to close out common vulnerabilities and improve secure coding habits.
• Advise on security implications of deploying AI tools internally and externally, including chatbots.
• Assess and mitigate risks from AI as a threat vector, including unauthorised or unintended AI agent access to internal systems.
• Act as the security governance point of contact for development teams, translating requirements into practical guidance.
• Report on SDLC compliance status and emerging AI-related risk to stakeholders.

Skills

Application security

SDLC governance

AI security

Stakeholder management

Emotional intelligence

Influencing

Job description

Eames Consulting in Singapore seeks an Application Security Manager to bring governance and structured security to the software development lifecycle. This is not a hands-on code review role; you will define checkpoints and partner with developers to lift secure coding hygiene.

You will drive AI security thinking, assess AI-related risks, and influence teams to adopt practical, secure practices while communicating with stakeholders across the business.